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.  Software  IP  and  cybersecurity  obligations  and  rights 
propagate  across  system  development,  deployment, 
and  evolution  activities  in  ways  not  well  understood  by 
system  developers,  integrators,  end-users,  or 
acquisition  managers. 


Emerging  challenges  in  achieving  BBP 
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•  Failure  to  understand  software  IP  and  cybersecurity 
obligations  and  rights  propagation  can  reduce  DoD 
buying  power,  increase  software  life  cycle  costs,  and 
reduce  competition. 

.  DoD  and  other  Government  agencies  would  financially 
and  administratively  benefit  from  engaging  the 
development  and  deployment  of  an  (open  source) 
automated  software  obligations  and  rights 
management  system  (SORMS)  for  the  acquisition 
workforce. 


New  practices  to  realize  cost-effective 
acquisition  of  OA  software  systems 


Need  to  R&D  worked  examples  of  reference  OA 
system  models,  assembled  capabilities,  and 
component  evolution  alternatives. 

Need  open  source  models  of  app/widget  security 
assurance  processes  and  reusable  cybersecurity 
requirements. 


New  practices  to  realize  cost-effective 
acquisition  of  OA  software  systems 


Need  precise  domain-specific  languages  (DSLs) 
and  automated  analysis  tools  for  continuously 
assessing  and  continuously  improving  cybersecurity 
and  IP  requirements  for  OA  C2  systems  composed 
from  apps/widgets. 

-  Need  a  software  obligations  and  rights  management  system 
(SORMS)  to  streamline  Web/mobile  software  component 
acquisition 


Conclusions 


Our  research  identifies  how  new  Web/mobile  software 
component  technologies,  IP  and  security 
requirements,  and  new  business  models  interact  to 
drive-down  or  drive-up  acquisition  costs. 

Managing  acquisition  costs  for  OA  Web/mobile 
software  components  will  be  demanding. 

Acquisition  workforce  will  need  automated  assistance, 
else  acquisition  process  costs  will  dominate 
development  costs  for  OA  Web/mobile  software 
components! 


Conclusions 

New  technical  risks  for  component-based  OA  software 
systems  can  dilute  the  cost-effectiveness  of  BBP 
efforts. 

Need  R&D  leading  to  automated  systems  (SORMS) 
that  can  model  and  analyze  OA  system  IP  licenses 
and  cybersecurity  requirements 

-  SORMS  will  empower  the  acquisition  workforce,  and 

-  Identify  and  manage  cost-effectiveness  trade-offs 
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